Re: [malware-list] [RFC 0/5] [TALPA] Intro to a linuxinterfaceforon access scanning

Arjan van de Ven
2008-08-13T13:59:04Z

On Wed, 13 Aug 2008 14:56:38 +0200
Pavel Machek <pavel@suse.cz> wrote:
> So you make sure all apps are modified. Distros are good at that, and
> modifications are not that hard.
>
> Plus, proposed solution already has three unacceptable holes:
>
> 1) it only catches known signatures
>
> 2) write vs. read race mentioned above
>
> 3) mmap problem
>
> . Making sure all apps use libmalware.so is trivial compared to
> solving 3).

the other thing is.. all applications ALREADY use such a library. It's
called "glibc".

--
If you want to reach me at my work email, use arjan@linux.intel.com
For development, discussion and tips for power savings,
visit http://www.lesswatts.org